Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Eric Biggers 07861d6371 KEYS: trusted_tpm1: Compare HMAC values in constant time ... [ Upstream commit eed0e3d305530066b4fc5370107cff8ef1a0d229 ] To prevent timing attacks, HMAC value comparison needs to be constant time. Replace the memcmp() with the correct function, crypto_memneq(). [For the Fixes commit I used the commit that introduced the memcmp(). It predates the introduction of crypto_memneq(), but it was still a bug at the time even though a helper function didn't exist yet.] Fixes: d00a1c72f7 ("keys: add new trusted key-type") Cc: stable@vger.kernel.org Signed-off-by: Eric Biggers <ebiggers@kernel.org> Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org> [ changed include from crypto/utils.h to crypto/algapi.h ] Signed-off-by: Sasha Levin <sashal@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2025-10-29 14:00:01 +01:00
..
apparmor
integrity
keys	KEYS: trusted_tpm1: Compare HMAC values in constant time	2025-10-29 14:00:01 +01:00
loadpin
lockdown
safesetid
selinux	selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len	2025-06-27 11:02:56 +01:00
smack	smack: recognize ipv4 CIPSO w/o categories	2025-06-04 14:32:33 +02:00
tomoyo
yama
commoncap.c
device_cgroup.c
inode.c	securityfs: don't pin dentries twice, once is enough...	2025-08-28 16:21:24 +02:00
Kconfig
Kconfig.hardening
lsm_audit.c
Makefile
min_addr.c
security.c